diff options
author | Jo-Philipp Wich <jo@mein.io> | 2020-12-07 15:26:41 +0100 |
---|---|---|
committer | Jo-Philipp Wich <jo@mein.io> | 2020-12-07 15:26:41 +0100 |
commit | bd4869f54fecb0f08865fd587cc62e300599e5af (patch) | |
tree | 188c656d8791ace87af4c0ff5f2d72d011b288e4 /tests/02_runtime/06_recursion | |
parent | 30d3682b7a35496110044bfe2c02a48eedf52a9f (diff) |
eval: fix use-after-free in uc_invoke() error path
Since we're putting the intermediate JSON return value, the associated tag
info will get freed as well, resulting in use-after-free when raising a
syntax error due to usage of continue or break outside of loop structures.
Read the tag type and offset values before releasing the intermediate `rv`
value.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'tests/02_runtime/06_recursion')
0 files changed, 0 insertions, 0 deletions